{"id":1629,"date":"2014-12-04T10:08:07","date_gmt":"2014-12-04T09:08:07","guid":{"rendered":"http:\/\/www.zarrelli.org\/blog\/?p=1629"},"modified":"2014-12-04T10:08:07","modified_gmt":"2014-12-04T09:08:07","slug":"easy-routing-workaround-linux-fortinet-ssl-client","status":"publish","type":"post","link":"https:\/\/www.zarrelli.org\/blog\/easy-routing-workaround-linux-fortinet-ssl-client\/","title":{"rendered":"Easy routing workaround for Linux Fortinet SSL client"},"content":{"rendered":"<p style=\"text-align: justify;\">So you have your Fortinet Linux SSL VPN client, you setup your credential, fire up the connection, it connects, then you\u00a0do not have access to any of your machines on your private vpn.<\/p>\n<p><a href=\"https:\/\/www.zarrelli.org\/blog\/wp-content\/uploads\/2014\/12\/Schermata-del-2014-12-04-094921.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1630 aligncenter\" src=\"https:\/\/www.zarrelli.org\/blog\/wp-content\/uploads\/2014\/12\/Schermata-del-2014-12-04-094921.png\" alt=\"Schermata del 2014-12-04 09:49:21\" width=\"540\" height=\"335\" srcset=\"https:\/\/www.zarrelli.org\/blog\/wp-content\/uploads\/2014\/12\/Schermata-del-2014-12-04-094921.png 540w, https:\/\/www.zarrelli.org\/blog\/wp-content\/uploads\/2014\/12\/Schermata-del-2014-12-04-094921-300x186.png 300w\" sizes=\"auto, (max-width: 540px) 100vw, 540px\" \/><\/a><\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">Nasty.<\/p>\n<p style=\"text-align: justify;\">You can see sent and received byte numbers flipping on the forticlient window, but you go nowhere.<\/p>\n<p style=\"text-align: justify;\">Errrr!!! Routing problems.<\/p>\n<p style=\"text-align: justify;\">Go either in your 64bit or 32bit client directory and edit<\/p>\n<pre class=\"lang:sh decode:true\">sysconfig.linux.sh<\/pre>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">Look for the following line:<\/p>\n<pre class=\"lang:sh decode:true\">addr=`ip addr show $ifn | grep \"inet\" | tr '\/' ' ' | awk '{ print $2 }'`<\/pre>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">and change it to:<\/p>\n<pre class=\"lang:sh decode:true\">addr=`ip addr show $ifn | grep -m 1 \"inet\" | tr '\/' ' ' | awk '{ print $2 }'`<\/pre>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">That&#8217;s it. It&#8217;s a simple matching problem.<\/p>\n<p style=\"text-align: justify;\">As you can see in :<\/p>\n<pre class=\"lang:sh decode:true\">forticlientsslvpn.log<\/pre>\n<p style=\"text-align: justify;\">It fails to grep the IP address for the ppp0 interface and so, it fails to create a new route towards your private network.<\/p>\n<p style=\"text-align: justify;\">Easy and nasty.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So you have your Fortinet Linux SSL VPN client, you setup your credential, fire up the connection, it connects, then you\u00a0do not have access to any of your machines on your private vpn. Nasty. You can see sent and received byte numbers flipping on the forticlient window, but you go nowhere. Errrr!!! Routing problems. Go &hellip;<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,31,36],"tags":[452,451,139,453,225],"class_list":["post-1629","post","type-post","status-publish","format-standard","hentry","category-debian","category-gnulinux","category-internet","tag-forticlient","tag-fortinet","tag-linux","tag-routing","tag-vpn","without-featured-image"],"_links":{"self":[{"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/posts\/1629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/comments?post=1629"}],"version-history":[{"count":0,"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/posts\/1629\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/media?parent=1629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/categories?post=1629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zarrelli.org\/blog\/wp-json\/wp\/v2\/tags?post=1629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}